System and method of establishing server connections to internet of things devices, including electronic locks

ABSTRACT

Systems and methods of an internet of things device connecting to a remote server. The internet of things device connects to a web target. The web target sends a response to the internet of things device indicating whether a change to the one or more settings of the internet of things device has been received at a cloud server. If a change has occurred, the internet of things device connects to a secure cloud server to update the settings on the internet of things device.

CROSS-REFERENCE TO RELATED APPLICATIONS

The present application is a National Stage Application of PCTInternational patent application No. PCT/US2019/051038, filed Sep. 13,2019, which claims the benefit of priority to U.S. Provisional PatentApplication No. 62/731,581, filed on Sep. 14, 2018, and U.S. ProvisionalPatent Application No. 62/744,015, filed on Oct. 10, 2018, whichapplications are incorporated herein by reference. To the extentappropriate, a claim of priority is made to each of the above-disclosedapplications.

TECHNICAL FIELD

This invention relates to the field of internet of things devices. Moreparticularly, this invention relates to methods of managing serverconnections to internet of things devices, such as electronic locks.

BACKGROUND

Many Internet of Things devices require a data communication connectionwith a server in order to operate. For example, an electronic lockdevice needs to communicate with a cloud server to perform remotefunctions. These IoT devices can be updated locally or remotely. Thesettings associated with the IoT devices may be modeled, or mirrored inthe cloud server. Changes to the settings of the IoT device are storedin the cloud server, and then propagated back to the IoT device.

Each time a change to the settings of the IoT device occurs, the changeis transmitted relatively quickly to the IoT device. This requires theIoT device to be in regular contact with the cloud server.

However, frequent connections to the cloud have a number of drawbacks.In some cases, cloud service providers may charge a fee to the IoTdevice manufacturer for each connection; in those cases, frequentconnections may be cost-prohibitive. In addition, frequent connectionsbetween the IoT device and the cloud may be resource intensive; eachconnection to the cloud causes access by the IoT device to the cloudmodel, which is typically secured and therefore requires additionaldevice-cloud communications to establish a secure connection/sessioneach time the IoT device connects. This may require significantadditional processing capability by the IoT device, or may affect powerconsumption (e.g., battery life) of the IoT device.

SUMMARY

The present disclosure relates generally to methods of an internet ofthings (IoT) device establishing a connection to a cloud server. The IoTdevice may establish a connection to a web target before establishing aconnection to the cloud server.

In a first aspect, an IoT device is described. The IoT device includes aprocessor and a memory communicatively connected to the processor. Thememory stores instructions, which, when executed, cause the IoT deviceto perform the following steps. At a predetermined time, the IoT deviceconnects to a web target. A response indicating whether a change to oneor more settings to the IoT device has been received at a cloud serverassociated with the IoT device is received from the web target. Thecontents of the response are assessed. Based on the response indicatedthat no change to the one or more settings has been received at thecloud server, a connection to the web target is terminated withoutconnecting to a secure IoT server interface of the clouds server. Basedon the response indicated that a change to the one or more settings hasbeen received at the cloud server, establishing a connection to thecloud server via a secure IoT server interface, update one or moresettings on the IoT device based on the change to the one or moresettings at the cloud server, and terminate the connection to the cloudserver.

In another aspect, a system comprises a server system hosting a webtarget, and an IoT device. The IoT device includes a processor and amemory communicatively connected to the processor. The memory storesinstructions, which, when executed, cause the IoT device to perform thefollowing steps. At a predetermined time, the IoT device connects to aweb target. A response indicating whether a change to one or moresettings to the IoT device has been received at a cloud serverassociated with the IoT device is received from the web target. Thecontents of the response are assessed. Based on the response indicatedthat no change to the one or more settings has been received at thecloud server, a connection to the web target is terminated withoutconnecting to a secure IoT server interface of the clouds server. Basedon the response indicated that a change to the one or more settings hasbeen received at the cloud server, establishing a connection to thecloud server via a secure IoT server interface, update one or moresettings on the IoT device based on the change to the one or moresettings at the cloud server, and terminate the connection to the cloudserver.

In yet another aspect, a system includes a server system hosting a webtarget, a mobile device application, and an IoT device. The IoT deviceincludes a processor and a memory communicatively connected to theprocessor. The memory stores instructions, that when executed, causesthe IoT device to: receive an external state change request imitated bythe mobile device application, establish a connection to the cloudserver via a secure internet of things server interface, update one ormore settings on the IoT device based on the change to the one or moresettings at the cloud server, and terminate the connection to the cloudserver.

This summary is provided to introduce a selection of concepts in asimplified form that are further described below in the DetailedDescription. This summary is not intended to identify key features oressential features of the claimed subject matter, nor is it intended tobe used to limit the scope of the claimed subject matter.

BRIEF DESCRIPTION OF THE DRAWINGS

The following drawings are illustrative of particular embodiments of thepresent disclosure and therefore do not limit the scope of the presentdisclosure. The drawings are not to scale and are intended for use inconjunction with the explanations in the following detailed description.Embodiments of the present disclosure will hereinafter be described inconjunction with the appended drawings, wherein like numerals denotelike elements.

FIG. 1 illustrates an environment in which aspects of the presentdisclosure may be implemented.

FIG. 2 illustrates a side view of a portion of the electronic lock seenin the environment of FIG. 1.

FIG. 3 illustrates a rear perspective view of a portion of theelectronic lock seen in the environment of FIG. 1.

FIG. 4 illustrates a front perspective view of a portion of theelectronic lock seen in the environment of FIG. 1.

FIG. 5 illustrates a schematic representation of the electronic lockseen in the environment of FIG. 1.

FIG. 6 illustrates a schematic representation of the mobile device seenin the environment of FIG. 1.

FIG. 7 illustrates a schematic representation of the cloud server seenin the environment of FIG. 1.

FIG. 8 illustrates a logical block diagram of a particularimplementation of the environment of FIG. 1.

FIG. 9 illustrates a flowchart of a method of mutually authenticatingdevices within the environment of FIG. 1.

FIG. 10 illustrates an example timing diagram of the method of FIG. 9.

DETAILED DESCRIPTION

Various embodiments of the present invention will be described in detailwith reference to the drawings, wherein like reference numeralsrepresent like parts and assemblies throughout the several views.Reference to various embodiments does not limit the scope of theinvention, which is limited only by the scope of the claims attachedhereto. Additionally, any examples set forth in this specification arenot intended to be limiting and merely set forth some of the manypossible embodiments for the claimed invention.

As briefly described above, embodiments of the present invention aredirected to connections between an IoT device, such as a smart securitydevice and a remote server. In some embodiments, the IoT device connectsvia a router to the internet. The IoT device is able to connect toeither a web target server and/or a secure cloud server. In certainembodiments, connections to a secure cloud server are managed such thatchanges to IoT device settings at the cloud server are quickly andeasily checked, since in many circumstances, these will remain unchangedwhen they are checked periodically by the IoT device. When changes aredetected, a separate connection process requiring detailedauthentication can be performed, which allows the IoT device to exchangeinformation about settings only after a higher level of trust isestablished between that device and the secure cloud server. Thismaintains high security for the device, while avoiding power andbandwidth intensive operations that may occur each time the deviceconnects to the server in the more typical instance that no settingchanges are made between times the IoT device connects to the server.

In example aspects, various wireless protocols can be used. In exampleembodiments, a Wi-Fi protocol (802.11x) may be used to connect theelectronic lock to a server (cloud) device, while a different wirelessprotocol (e.g., Bluetooth, including Bluetooth Low Energy, or BLE) usedfor short-range communication between the electronic lock and otherdevices, such as a mobile device used to actuate the lock. In otherembodiments, various other wireless protocols can be used, such as othershort- or long-range wireless protocols (e.g., cellular, RFID/NFC,Zigbee, Z-wave, etc.).

The term “lock” or “lockset” is broadly intended to include any type oflock, including but not limited to, deadbolts, knob locks, lever handlelocks, mortise locks and slide locks, whether mechanical, electrical, orelectro-mechanical locks. The locking points may have various mountingconfigurations and/or locations, including but not limited to: mortisedwithin the doorframe, mounted externally to the doorframe or supportstructure, and/or affixed directly to the door.

Although this disclosure describes these features as implemented on anelectronic deadbolt lock for purposes of example, these features areapplicable to any type of lockset, including but not limited to,deadbolts, knobset locks, handleset locks, etc. Still further, exampleaspects of the present application can be applied to other types of IoTdevices for which security is an issue, e.g., wireless/interconnectedhome devices that store user data.

FIG. 1 illustrates an environment 10 in which aspects of the presentdisclosure may be implemented. A user 12 has a phone or other mobiledevice 200 with wireless communication capabilities. The user 12 is anauthorized person desiring to unlock (or lock) a door 14. The door 14includes an electronic lock 100 (also referred to as a wirelesselectronic lockset). In alternative embodiments, this may be any IoTdevice. The mobile device 200 is capable of communicating 22 with aserver 300 and communicating 20 with the electronic lock 100. The server300 can be, for example, a physical server or a virtual server hosted ina cloud storage environment 16. In some embodiments, the electronic lock100 is also capable of communicating 24 with the server 300. Suchcommunication can optionally occur via one or more wirelesscommunication protocols, e.g., Wi-Fi (IEEE 802.11), short-range wirelesscommunication to a Wi-Fi bridge, or other connection mechanism. Theserver 300 generally authenticates the electronic lock 100 beforeestablishing a secure connection. Alternatively, the electronic lock 100can authenticate the server 300 to establish a secure connection. Insome instances, the server 300 and the electronic lock 100 operate tomutually authenticate each other in order to provide a higher level ofsecurity when establishing a connection.

FIGS. 2-4 illustrate an electronic lock 100 as installed at a door 102,according to one example of the present disclosure. The door has aninterior side 104 and an exterior side 106. The electronic lock 100includes an interior assembly 108, an exterior assembly 110, and a latchassembly 112. The latch assembly 112 is shown to include a bolt 114 thatis movable between an extended position (locked) and a retractedposition (unlocked, shown in FIGS. 2-4). Specifically, the bolt 114 isconfigured to slide longitudinally and, when the bolt 114 is retracted,the door 102 is in an unlocked state. When the bolt 114 is extended, thebolt 114 protrudes from the door 102 into a doorjamb (not shown) toplace the door in a locked state.

In some examples, the interior assembly 108 is mounted to the interiorside 104 of the door 102, and the exterior assembly 110 is mounted tothe exterior side 106 of the door 102. The latch assembly 112 istypically at least partially mounted in a bore formed in the door 102.The term “outside” is broadly used to mean an area outside the door 102and “inside” is also broadly used to denote an area inside the door 102.With an exterior entry door, for example, the exterior assembly 110 maybe mounted outside a building, while the interior assembly 108 may bemounted inside a building. With an interior door, the exterior assembly110 may be mounted inside a building, but outside a room secured by theelectronic lock 100, and the interior assembly 108 may be mounted insidethe secured room. The electronic lock 100 is applicable to both interiorand exterior doors.

Referring to FIG. 3, the interior assembly 108 can include a processingunit 116 (shown schematically) containing electronic circuitry for theelectronic lock 100. In some examples, the interior assembly 108includes a manual turn piece 118 that can be used on the interior side104 of door 102 to move the bolt 114 between the extended and retractedpositions.

The processing unit 116 is operable to execute a plurality of softwareinstructions (i.e., firmware) that, when executed by the processing unit116, cause the electronic lock 100 to implement the methods andotherwise operate and have functionality as described herein.

The processing unit 116 may comprise a device commonly referred to as aprocessor, e.g., a central processing unit (CPU), digital signalprocessor (DSP), or other similar device, and may be embodied as astandalone unit or as a device shared with components of the electroniclock 100. The processing unit 116 may include memory communicativelyinterfaced to the processor, for storing the software instructions.Alternatively, the electronic lock 100 may further comprise a separatememory device for storing the software instructions that is electricallyconnected to the processing unit 116 for the bi-directionalcommunication of the instructions, data, and signals therebetween.

Referring to FIG. 4, the exterior assembly 110 can include exteriorcircuitry 117 (see FIG. 5) communicatively and electrically connected tothe processing unit 116. For example, the exterior assembly 110 caninclude a keypad 120 for receiving a user input and/or a keyway 122 forreceiving a key (not shown). The exterior side 106 of the door 102 canalso include a handle 124. In some examples, the exterior assembly 110includes the keypad 120 and not the keyway 122. In some examples, theexterior assembly 110 includes the keyway 122 and not the keypad 120. Insome examples, the exterior assembly 110 includes the keyway 122 and thekeypad 120. When a valid key is inserted into the keyway 122, the validkey can move the bolt 114 between the extended and retracted positions.When a user inputs a valid code into the keypad 120, the bolt 114 ismoved between the extended and retracted positions.

In some examples, the exterior assembly 110 is electrically connected tothe interior assembly 108. Specifically, the keypad 120 is electricallyconnected to the interior assembly 108, specifically to the processingunit 116, by, for example, an electrical cable (not shown) that passesthrough the door 102. When the user inputs a valid code via keypad 120that is recognized by the processing unit 116, an electrical motor isenergized to retract the bolt 114 of latch assembly 112, thus permittingdoor 102 to be opened from a closed position. Still further, anelectrical connection between the exterior assembly 110 and the interiorassembly 108 allows the processing unit 116 to communicate with otherfeatures included in the exterior assembly 110, as noted below

The keypad 120 can be any of a variety of different types of keypads.The keypad 120 can be one of a numeric keypad, an alpha keypad, and/oran alphanumeric keypad. The keypad 120 can have a plurality ofcharacters 126 displayed thereon. For example, the keypad 120 caninclude a plurality of buttons that can be mechanically actuated by theuser (e.g., physically pressed). In some examples, the keypad 120includes a touch interface 128, such as a touch screen or a touchkeypad, for receiving a user input. The touch interface 128 isconfigured to detect a user's “press of a button” by contact without theneed for pressure or mechanical actuation. An example of the touchinterface is described in U.S. Pat. No. 9,424,700 for an “ELECTRONICLOCK HAVING USAGE AND WEAR LEVELING OF A TOUCH SURFACE THROUGHRANDOMIZED CODE ENTRY,” which is hereby incorporated by reference in itsentirety.

In alternative embodiments, one or more other types of user interfacedevices could be incorporated into the electronic lock 100. For example,in example implementations, the exterior assembly 110 can include abiometric interface (e.g., a fingerprint sensor, retina scanner, orcamera including facial recognition), or an audio interface by whichvoice recognition could be used to actuate the lock. Still further,other touch interfaces may be implemented, e.g., where a single touchmay be used to actuate the lock rather than requiring entry of aspecified code.

FIG. 5 is a schematic representation of the electronic lock 100 mountedto the door 102. The interior assembly 108, the exterior assembly 110,and the latch assembly 112 are shown.

The exterior assembly 110 is shown to include the keypad 120 and anoptional exterior antenna 130 usable for communication with a remotedevice. In addition, the exterior assembly 110 can include one or moresensors 131, such as a camera, proximity sensor, or other mechanism bywhich conditions exterior to the door 102 can be sensed. In response tosuch sensed conditions, notifications may be sent by the electronic lock100 to a server 300 or mobile device 200, including informationassociated with the sensed event (e.g., time and description of thesensed event, or remote feed of sensor data obtained via the sensor).

The exterior antenna 130 is capable of being used in conjunction with aninterior antenna 134, such that the processing unit 116 can determinewhere a mobile device is located. Only a mobile device 200 determined tobe located on the exterior of the door is able to actuate (unlock orlock) the door. This prevents unauthorized users from being locatedexterior to the door 102 of the electronic lock and taking advantage ofan authorized mobile device that may be located on the interior of thedoor, even though that authorized mobile device is not being used toactuate the door. However, such a feature is not required, but can addadditional security. In alternative arrangements, the electronic lock100 is only actuable from either the keypad 120 (via entry of a validcode) or from an application installed on the mobile device 200. In sucharrangements, because touch alone at the exterior of the door cannotactuate the lock, the exterior antenna 130 may be excluded entirely.

As described above, the interior assembly 108 includes the processingunit 116. The interior assembly 108 can also include a motor 132 and anoptional interior antenna 134.

As shown, the processing unit 116 includes at least one processor 136communicatively connected to a security chip 137, a memory 138, variouswireless communication interfaces (e.g., including a Wi-Fi interface 139and Bluetooth interface 140), and a battery 142. The processing unit 116is located within the interior assembly 108 and is capable of operatingthe electronic lock 100, e.g., by actuating a motor 132 to actuate thebolt 114.

In some examples, the processor 136 can process signals received from avariety of devices to determine whether the electronic lock 100 shouldbe actuated. Such processing can be based on a set of preprogramedinstructions (i.e., firmware) stored in the memory 138. In certainembodiments, the processing unit 116 can include a plurality ofprocessors 136, including one or more general purpose or specificpurpose instruction processors. In some examples, the processing unit116 is configured to capture a keypad input event from a user and storethe keypad input event in the memory 138. In other examples, theprocessor 136 receives a signal from the exterior antenna 130, theinterior antenna 134, or a motion sensor 135 (e.g., a vibration sensor,gyroscope, accelerometer, motion/position sensor, or combinationthereof) and can validate received signals in order to actuate the lock100. In still other examples, the processor 136 receives signals fromthe Bluetooth interface 140 to determine whether to actuate theelectronic lock 100.

In some embodiments, the processing unit 116 includes a security chip137 that is communicatively interconnected with one or more instances ofprocessor 136. The security chip 137 can, for example, generate andstore cryptographic information usable to generate a certificate usableto validate the electronic lock 100 with a remote system, such as theserver 300 or mobile device 200. In certain embodiments, the securitychip 137 includes a one-time write function in which a portion of memoryof the security chip 137 can be written only once, and then locked. Suchmemory can be used, for example, to store cryptographic informationderived from characteristics of the electronic lock 100, or itscommunication channels with server 300 or one or more mobile devices200. Accordingly, once written, such cryptographic information can beused in a certificate generation process which ensures that, if any ofthe characteristics reflected in the cryptographic information arechanged, the certificate that is generated by the security chip 137would become invalid, and thereby render the electronic lock 100 unableto perform various functions, such as communicate with the server 300 ormobile device 200, or operate at all, in some cases. Details regardingconfiguration of an electronic lock 100 to include security features,including authenticating communications between the electronic lock anda cloud server, are provided below.

The memory 138 can include any of a variety of memory devices, such asusing various types of computer-readable or computer storage media. Acomputer storage medium or computer-readable medium may be any mediumthat can contain or store the program for use by or in connection withthe instruction execution system, apparatus, or device. By way ofexample, computer storage media may include dynamic random access memory(DRAM) or variants thereof, solid state memory, read-only memory (ROM),electrically erasable programmable ROM, and other types of devicesand/or articles of manufacture that store data. Computer storage mediagenerally includes at least one or more tangible media or devices.Computer storage media can, in some examples, include embodimentsincluding entirely non-transitory components.

As noted above, the processing unit 116 can include one or more wirelessinterfaces, such as Wi-Fi interface 139 and Bluetooth interface 140.Other RF circuits can be included as well. In the example shown, theinterfaces 139, 140 are capable of communication using at least onewireless communication protocol. In some examples, the processing unit116 can communicate with a remote device via the Wi-Fi interface 139, ora local device via the Bluetooth interface 140. In some examples, theprocessing unit 116 can communicate with one or both of the mobiledevice 200 and server 300 via the Wi-Fi interface, and can communicatewith the mobile device 200 when the mobile device is in proximity to theelectronic lock 100 via the Bluetooth interface 140. In someembodiments, the processing unit 116 is configured to communicate withthe mobile device 200 via the Bluetooth interface 140, andcommunications between the mobile device 200 and electronic lock 100when the mobile device 200 is out of range of Bluetooth wireless signalscan be relayed via the server 300, e.g., via the Wi-Fi interface 139.

Of course, in alternative embodiments, other wireless protocols could beimplemented as well, via one or more additional wireless interfaces. Insome examples, the electronic lock 100 can wirelessly communicate withexternal devices through a desired wireless communications protocol. Insome examples, an external device can wirelessly control the operationof the electronic lock 100, such as operation of the bolt 114. Theelectronic lock 100 can utilize wireless protocols including, but notlimited to, the IEEE 802.11 standard (Wi-Fi), the IEEE 802.15.4 standard(Zigbee and Z-wave), the IEEE 802.15.1 standard (Bluetooth®), a cellularnetwork, a wireless local area network, near-field communicationprotocol, and/or other network protocols. In some examples, theelectronic lock 100 can wirelessly communicate with networked and/ordistributed computing systems, such as may be present in acloud-computing environment.

In a particular embodiment, the processor 136 will receive a signal atthe Bluetooth interface 140 via a wireless communication protocol (e.g.,BLE) from a mobile device 200, for communication of an intent to actuatethe electronic lock 100. As illustrated in further detail below, theprocessor 136 can also initiate communication with the server 300 viaWi-Fi interface 139 (or another wireless interface) for purposes ofvalidating an attempted actuation of the electronic lock 100, orreceiving an actuation command to actuate the electronic lock 100.Additionally, various other settings can be viewed and/or modified viathe Wi-Fi interface 139 from the server 300; as such, a user of a mobiledevice 200 may access an account associated with the electronic lock 100to view and modify settings of that lock, which are then propagated fromthe server 300 to the electronic lock 100. In alternative embodiments,other types of wireless interfaces can be used; generally, the wirelessinterface used for communication with a mobile device can operate usinga different wireless protocol than a wireless interface used forcommunication with the server 300.

In a particular example, the Bluetooth interface 140 comprises aBluetooth Low Energy (BLE) interface. Additionally, in some embodiments,the Bluetooth interface 140 is associated with a security chip 141, forexample, a cryptographic circuit capable of storing cryptographicinformation and generating encryption keys usable to generatecertificates for communication with other systems, e.g., mobile device200.

The interior assembly 108 also includes the battery 142 to power theelectronic lock 100. In one example, the battery 142 may be a standardsingle-use (disposable) battery. Alternatively, the battery 142 may berechargeable. In still further embodiments, the battery 142 is optionalaltogether, replaced by an alternative power source (e.g., an AC powerconnection).

The interior assembly 108 also includes the motor 132 that is capable ofactuating the bolt 114. In use, the motor 132 receives an actuationcommand from the processing unit 116, which causes the motor 132 toactuate the bolt 114 from the locked position to the unlocked positionor from the unlocked position to the locked position. In some examples,the motor 132 actuates the bolt 114 to an opposing state. In someexamples, the motor 132 receives a specified lock or unlock command,where the motor 132 only actuates the bolt 114 if the bolt 114 is in thecorrect position. For example, if the door 102 is locked and the motor132 receives a lock command, then no action is taken. If the door 102 islocked and the motor 132 receives an unlock command, then the motor 132actuates the bolt 114 to unlock the door 102.

As noted above, the optional interior antenna 134 may also be located inthe interior assembly 108. In some examples, the interior antenna 134 iscapable of operating together with the exterior antenna 130 to determinethe location of the mobile device 200. In some examples, only a mobiledevice determined to be located on the exterior side 106 of the door 102is able to unlock (or lock) the door 102. This prevents unauthorizedusers from being located near the electronic lock 100 and takingadvantage of an authorized mobile device that may be located on theinterior side 104 of the door 102, even though the authorized mobiledevice is not being used to unlock the door 102. In alternativeembodiments, the interior antenna 134 can be excluded entirely, sincethe electronic lock 100 is actuated only by an authorized mobile device.

Referring to FIGS. 2-5 generally, in example embodiments, the electroniclock 100 may be used on both interior and exterior doors. Describedbelow are non-limiting examples of a wireless electronic lockset. Itshould be noted that the electronic lock 100 may be used on other typesof doors, such as a garage door or a doggie door, or other types ofdoors that require an authentication process to unlock (or lock) thedoor.

In some embodiments, the electronic lock 100 is made of mixed metals andplastic, with engineered cavities to contain electronics and antennas.For example, in some embodiments, the lock utilizes an antenna near theexterior face of the lockset, designed inside the metal body of thelockset itself. The metal body can be engineered to meet strict physicalsecurity requirements and also allow an embedded front-facing antenna topropagate RF energy efficiently.

In still further example embodiments, the electronic lock 100 caninclude an integrated motion sensor 135. Using such a motion sensor(e.g., an accelerometer, gyroscope, or other position or motion sensor)and wireless capabilities of a mobile device or an electronic device(i.e., fob) with these capabilities embedded inside can assist indetermining additional types of events (e.g., a door opening or doorclosing event, a lock actuation or lock position event, or a knock eventbased on vibration of the door). In some cases, motion events can causethe electronic lock 100 to perform certain processing, e.g., tocommunicatively connect to or transmit data to a mobile device 200 inproximity to the electronic lock 100.

Of course, in alternative embodiments, other lock actuation sequencesmay not require use of a motion sensor 135. For example, if the mobiledevice 200 is in valid range of the electronic lock 100 when using aparticular wireless protocol (e.g., Bluetooth Low Energy), then aconnection will be established with the electronic lock 100. Otherarrangements are possible as well, using other connection sequencesand/or communication protocols.

FIG. 6 illustrates a schematic diagram of a mobile device 200 usable inembodiments of the disclosure to authenticate an IoT device with a cloudserver. In some embodiments, the mobile device 200 operates to form aBluetooth or BLE connection with a network enabled security device suchas an electronic lock. The mobile device 200 then communicates with acloud server via a Wi-Fi or mobile data connection. The mobile device200 thus operates to communicate information between the lock and theserver. In other embodiments, the mobile device 200 is not requiredbecause the IoT device is network enabled such that it can connected viaWi-Fi to the cloud server. The mobile device 200 shown in FIG. 6includes an input device 602, an output device 604, a processor 606, awireless Wi-Fi interface 608, a wireless BLE interface 610, a powersupply 612, and a memory 614.

The input device 602 operates to receive input from external sources.Such sources can include inputs received from a user. The inputs can bereceived through a touchscreen, a stylus, a keyboard, etc.

The output device 604 operates to provide output of information from themobile device 200. For example, a display could output visualinformation while a speaker could output audio information.

The processor 606 reads data and instructions. The data and instructionscan be stored locally, received from an external source, or accessedfrom removable media.

The wireless interface 608 is similar to the Wi-Fi interface 139. AWi-Fi connection 22 can be established with the server 300.

The wireless interface 610 is similar to the Bluetooth interface 140. ABLE connection 20 can be established with the electronic lock 100.

The power supply 612 provides power to the processor.

The memory 614 includes software applications 620 and an operatingsystem 622. The memory 614 contains data and instructions that areusable by the processor to implement various functions of the mobiledevice 200.

The software applications 620 can include applications usable to performvarious functions on the mobile device 200. One such application is anIoT application. The IoT application 626 can operate to access andcontrol devices that are connected to the mobile device through anetwork.

FIG. 7 illustrates a schematic diagram of a server 300 usable inembodiments of the disclosure to authenticate an IoT device. The server300 can be owned and maintained by a manufacturer of an IoT device thatneeds to be authenticated before use, or can be a virtual serverprovided by a cloud hosting service to such a manufacturer for use. Inexample embodiments, the server 300 can be implemented using a scalableset of cloud-based computing resources; the components described hereinare intended, therefore, as simply illustrative. Accordingly, in theexample shown, the server 300 includes a memory 702, a processor 704,and a network interface 706.

The memory 702 stores instructions defining a web target interface 710,a secure IoT interface 712, and a data store 714. The processor 704operates to execute instructions stored in the memory 702. The networkinterface 706 operates to establish connections with IoT devices such asan electronic lock 100 as well as mobile device 200 via a networkconnection such as Wi-Fi, cellular, etc.

The web target interface 710 and secure IoT interface 712, when executedby the processor 704, manage connections from IoT devices to the datastore 714, which stores a set of mirrored IoT device settings 715 foreach IoT device connected to and associated with the server 300. The webtarget interface 710 may be an interface by which a user may accesscloud infrastructure, such as a free or low-cost interface that haslimited security requirements and therefore limited bandwidth. The webtarget interface can be accessed via, e.g., a particular URL andextension that uniquely identifies the IoT device that is attempting toconnect to the web target interface via the network interface 706. Thesecure IoT interface 712 may enforce a higher level of security, or mayrequire additional communication (e.g., constant comparison against aset of mirrored IoT device settings 715). The secure IoT interface 712can be used to direct access the data store 714 to read or modifysettings in one or more of the mirrored IoT device settings 715.Generally, interfaces 710, 712 operate to verify connections from theIoT device, generate valid resource responses, and update reportedstates. The functions of the server 300 are further described in themethod of FIGS. 8-10.

FIG. 8 illustrates a more detailed view of a system for efficientlyestablishing connections with a server, in particular where the serveris implemented in a cloud environment. In the example shown, server 300is illustrated as connected to a mobile device 200 as well as an IoTdevice 814, such as electronic lock 100.

In the example shown, the server 300 hosts a cloud server 804 whichcontrols access to IoT device settings 816, which represents a set ofmirrored settings of the IoT device. The cloud server 806 can also beconnected to the Internet 810, for example, for connection by othertypes of devices or administrative access.

In the example shown, and as used in example IoT installations, an IoTserver interface 808 provides a secure interface by which the IoT device814 can be updated by accessing the cloud server 804 for sending updatesto or receiving updates from the IoT device settings 816. Mirroredupdates may also be received from the mobile device 200 at the server300. When the IoT device connects to the cloud server 804 via the IoTserver interface 808, the IoT device can connect, for example via WiFi,to a local router 812, which accesses the IoT server interface via theInternet 810.

To ensure consistent settings are being maintained between the IoTdevice 814 and the IoT device settings 816, the IoT device 814 may beconfigured to periodically communicate with the server 300. This mayoccur, for example, every five minutes, or otherwise when the IoT devicehas been activated from a low power state (e.g., by receiving a localconnection from a mobile device 200, such as a Bluetooth connection).However, as noted above, in many instances, the IoT device 814 may haveno updates to be applied (e.g., no settings in the IoT device settings816 have been updated). Accordingly, access via the IoT server interface808 may be inefficient, since such contact incurs costs when the server300 is hosted at a third party cloud computing site, and in any event,requires establishment of a connection that requires more processing ofresponse message(s), and therefore uses more bandwidth and power than a“lighter-weight” connection. For example, when an IoT device 814connects to the server 300 at the IoT server interface 808, the IoTserver interface 808 may act to validate the IoT device, requiring it togenerate encryption keys, assess changes relative to an IoT mirror, orperform other power-hungry or bandwidth intensivecommunication/handshaking algorithms.

Accordingly, in the present example embodiment, a web target interface826 is provided at the server 300 as well. The web target interface 826is accessible by the IoT device 814 via the Internet 810 similarly tothe IoT server interface 808, but is isolated form and cannot access theIoT device settings 816. Accordingly, the web target interface 826 doesnot need to have the same security concerns as in the IoT serverinterface 808. The web target interface 826 is therefore generally alower cost, less bandwidth-intensive communication interface than theIoT server interface 808. The web target interface 826 generallypresents a web target that is unique to each IoT device 814 or IoTdevice connection sequence, and allows the IoT device 814 to quicklydetermine, by way of a simple status response, whether there is a changeto one or more settings in the IoT device settings 816 that wouldrequire the IoT device 814 to synchronize settings with the IoT devicesettings 816 via the IoT server interface 808.

Each web target can be hosted by a web target server 824 that is exposedby the web target interface 826. The web target server 824 receivesindications of changes to the IoT device settings 816 via one or morerules 818, which may monitor the mirror and trigger a changenotification 820 upon a change occurring in the IoT device settings 816.The change notification 820 can be managed by a server process 822 whichstores the change notification in the web target server 824 at alocation unique to the IoT device 814. Accordingly, the IoT device 814can, instead of periodically accessing the server via the IoT serverinterface 808 and incurring substantial communication bandwidth andauthentication techniques that may have a detrimental impact onperformance and battery life of the IoT device, periodically access theserver via the web target interface 826 to quickly obtain a compactresponse indicating whether a change has occurred to the IoT devicesettings 816 that would require update. In example embodiments, the IoTdevice 814 can access the web target server 824 using a unique resourceidentifier (e.g., a URL) that is unique to the device for purposes ofobtaining a status notification in response that is specific to that IoTdevice.

In operation, the IoT device 814 will periodically connect to the server300 via the web target interface 826 to determine whether a state changehas occurred to the IoT device settings 816. The web target server 824will return a response to the IoT device based on notifications itreceives from a server process 822, based on rules 818 set to trigger inresponse to changes at the IoT device settings 816. If no change hasoccurred, the IoT device 814 disconnects from the server 300. Once theIoT device 814 is disconnected, a delay timer is started to determine anext time to check for changes.

However, if a change has occurred, the IoT device will connect to theserver 300 via the IoT server interface 808 and access cloud server 804,which will provide updates regarding settings in the IoT device settings816. Changes to the one or more settings to the IoT device that triggerthe IoT device to connect to the cloud server 804 include an indicationthat a change has occurred to the IoT device 814. If the IoT device 814is an electronic lock, the indication that a change has occurred may bea lock or unlock command. The IoT device 814 is also triggered toconnect to the cloud server 804 when no endpoint response is receivedfrom the web target interface 826, indicating that the web target server824 is inoperable or unresponsive. Changes to the one or more settingsto the IoT device 814 that do not trigger the IoT device 814 tosubsequently connect to the cloud server 804 is an indication that nochange has occurred.

Referring now to FIG. 9, an example flowchart of a method 900 ofconnecting to the server 300 from an IoT device, such as an electroniclock 100, is shown.

In a first stage 910, the IoT device is powered on. At 912, the IOTdevice may wake upon the expiration of a timer or upon an external statechange request from a mobile device or a web application. When the IoTdevice wakes, at 914, the IoT device determines if the nonce is valid.If the nonce is not valid, at 916, a delta callback server (DCS) flag iscleared, and at 918 a connection to Wi-Fi is established. If the nonceis valid, the connection to Wi-Fi is established, without clearing thedelta callback server flag.

At 920, the router is synced and at 922 the IoT device connects to therouter. At 924, a DHCP/ARP is received, and at 926 the TCP/HTTP stack isloaded. The IoT device will, at 928, determine whether a delta callbackserver flag is true or false. A true delta callback server flagassessment at 928 reflects that a “delta callback server” is used. Apresent delta callback server generally corresponds to an indicationthat a web target is present for the IoT device to connect to (e.g.,such as web target interface 826 of FIG. 8), as compared to when thedelta callback server is not present, which corresponds to a situationin which only an IoT server interface (such as interface 808 of FIG. 8)is available. A false delta callback server flag represents that no suchseparate web interface is present/used.

If the delta callback server flag is false, this means that the deltacallback server (e.g., a web server hosting the web target interface) ispresent, and the IoT device should connect to that server rather thandirectly to an IoT device interface. Accordingly, the process continuesto a second stage 930. In this second stage 930, the IoT device issigned into the web target server (also referred to herein as a deltacallback server). At 932, a single TLS process is started for forming asecure connection, and at 934, the IoT device connects to the web targetserver. The web target server will return a response to the IoT deviceindicating a status of changes to the mirror associated with the IoTdevice. In particular, the web target server can provide a few statusresponses in response to the connection from the IoT device. Forexample, the web target server can transmit a “40X” message, whichindicates that there is no change to any settings associated with theIoT device, and therefore no further action would be required of the IoTdevice. However, a different response could indicate that a change hasoccurred that requires the IoT device to connect to the cloud server tosynchronize settings with an associated mirror. Still further, a lack ofresponse message may indicate to the IoT device that it should proceedto connect to the cloud server via the IoT device interface.Accordingly, if the IoT device determines that the response received isnot a “40X” response (e.g., a response 404), the IoT device willinitiate a connection to the cloud server in a third stage 950. However,a true response to a “40 X” valid resource response indicates that thereis no change to the one or more settings. If there is no change to theone or more settings, the process moves to the fourth stage 970.

In the third stage 950, the IoT device will sign into the cloud serverto determine updates between the IoT device and the mirror. At 952, theIoT device will generate a random number, and at 954, will restore asession ticket. The IoT device will, at 956, start a mutual secureconnection process. The mutual secure connection process can include aprocess of mutual authentication, such as described in U.S. ProvisionalPatent Application No. 62/731,417, entitled “Authentication of Internetof Things Devices, Including Electronic Locks”, the disclosure of whichis hereby incorporated by reference in its entirety.

At 958, the IoT device will resume a communication protocol session withthe cloud server, e.g., via the IoT server interface 808 of FIG. 8. Thecommunication protocol session can be implemented, for example, using amessage queuing telemetry transport (MQTT) communication protocol. At960, the communication protocol session is started, and at 962, changesto the mirror are checked. At operation 964, a delta request isassessed; if true, changes have occurred, and an update command is sentto the IoT device at 966. A state change operation 968 will wait forstate changes to be synchronized to the IoT device.

Based on the updated command sent to the IoT device at 966, the state ofthe IoT device is changed 968. For example, if the IoT device is a lock,the command may be a lock or unlock command, or a change to one or moresettings or permissions of the lock. Other changes may be performed aswell, and updates may be sent from the lock or other IoT device to themirror, such as history information or other notifications received atthe device/lock. Once the state change is complete, or alternatively, ifthe delta request returns a false result, the IoT device enters thefourth stage 970 to disconnect from the server and power down.

The fourth stage 970 is related to powering down the IoT device. At 972,a GUID is generated from the nonce. At 974, the updated reported statesand the GUID are posted. At 976, the TLS/TCP stack is torn down, and at978, the TLS/MQTT session state is stored. At 980, the Wi-Fi radio ispowered down, and at 982 the delay timer is started, indicating a nextconnection sequence time. At 984, the IoT device returns to a sleepstate.

Referring to FIG. 9 generally, it is noted that this method 900 may berepeated after the delay timer expires or a mobile device or serverinitiates a connection. Additionally, within each stage, one or moreoperations may be performed in different orders, depending on aparticular implementation within the IoT device.

FIG. 10 illustrates an example timing diagram 1000 of a sever sidecallback device. The diagram outlines an example sequence of events thatoccur when a remote event, such as an external state change request froma mobile device, is introduced. The diagram also shows how each of theresources contributes to the overall response process.

At a mobile application web client 1002 (e.g., resident on a mobiledevice 200), a mobile device request change 1020 is is sent to an APIgateway (mobile API) 1004. The mobile API issues a desired state 1022 toa mirror 1006. Receiving the request from the API gateway causes themirror 1006 to be updated, as well as to send a rule engine trigger 1024to a server process 1008. The server process 1008 acquires a new serialnumber 1026 and then gets a nonce from the mirror at step 1028. A newfile resource 1030 is generated and sent to a cloud server 1010. Thisnew file resource will be accessed by an IoT device 1012 to determinewhether updates at the mirror 1006 should be synchronized to the IoTdevice 1012.

After an optional delay 1032, for example 5 minutes, the IoT device 1012issues a resource request 1034 to the cloud server 1010. If the IoTdevice is a lock, the request resource received is a lock request. Thecloud server 1010 responds at 1036 by generating a website URL 1038, andsends back a response 1040 to the IoT device 1012 and closes theconnection 1042. This results in the IoT device closing the connectionat 1044.

Because a change has occurred to the mirror, the server response at 1040will reflect that a change has occurred. Accordingly, the IoT deviceconnects to the IoT interface at 1046 to synchronize with the mirror. Inparticular, at 1048, the mirror is read by the IoT device 1012. Themirror URL gets updated 1050, and then the new URL is stored 1052, andmirrored to the IoT device 1012. In this way, the mirror resource has areference that is unique to the cloud server and the IoT device,allowing the IoT device to be uniquely identified by the URL it uses toconnect to the cloud server 1010.

At this stage, the IoT device 1012 and mirror 1006 are synchronized.Accordingly, after a timing delay 1054 (e.g., 5 minutes or some otherpreconfigured time at the IoT device), the IoT device will send a secondresource request to the predetermined URL at 1056. In this case, becausethere has been no change, the server response will be generated at 1058,causing a server response at 1060 to be a response “40X”. Accordingly,the connection can be closed at 1064, and the IoT device 1012 will dropthe connection at 1062 with no further action, since no updates arerequired that would cause the IoT device to connect to the mirror 1006.

Embodiments of the present invention, for example, are described abovewith reference to block diagrams and/or operational illustrations ofmethods, systems, and computer program products according to embodimentsof the invention. The functions/acts noted in the blocks may occur outof the order as shown in any flowchart. For example, two blocks shown insuccession may in fact be executed substantially concurrently or theblocks may sometimes be executed in the reverse order, depending uponthe functionality/acts involved.

The description and illustration of one or more embodiments provided inthis application are not intended to limit or restrict the scope of theinvention as claimed in any way. The embodiments, examples, and detailsprovided in this application are considered sufficient to conveypossession and enable others to make and use the best mode of claimedinvention. The claimed invention should not be construed as beinglimited to any embodiment, example, or detail provided in thisapplication. Regardless of whether shown and described in combination orseparately, the various features (both structural and methodological)are intended to be selectively included or omitted to produce anembodiment with a particular set of features. Having been provided withthe description and illustration of the present application, one skilledin the art may envision variations, modifications, and alternateembodiments falling within the spirit of the broader aspects of thegeneral inventive concept embodied in this application that do notdepart from the broader scope of the claimed invention.

1. An internet of things device comprising: a processor; a memorycommunicatively connected to the processor, the memory storinginstructions which, when executed, cause the internet of things deviceto: at a predetermined time, connect to a web target; receive, from theweb target, a response indicating whether a change to one or moresettings to the internet of things device has been received at a cloudserver associated with the internet of things device; assess contents ofthe response; based on the response indicating that no change to the oneor more settings has been received at the cloud server, terminate aconnection to the web target without connecting to a secure internet ofthings server interface of the cloud server; and based on the responseindicating that a change to the one or more settings has been receivedat the cloud server: establish a connection to the cloud server via asecure internet of things server interface; update one or more settingson the internet of things device based on the change to the one or moresettings at the cloud server; and terminate the connection to the cloudserver.
 2. The internet of things device of claim 1, wherein theinstructions further cause the internet of things device to, based onfailing to receive a response from the web target: establish aconnection to the cloud server via a secure internet of things serverinterface; update one or more settings on the internet of things devicebased on the change to the one or more settings at the cloud server; andterminate the connection to the cloud server.
 3. The internet of thingsdevice of claim 1, wherein terminating the connection to the cloudserver includes terminating the connections to the web target and thesecure internet of things server interface.
 4. The internet of thingsdevice of claim 1, wherein the internet of things device comprises anelectronic lock.
 5. The internet of things device of claim 1, whereinthe predetermined time corresponds to an expiration of a predeterminedamount of time since a previous connection to the web target or anexternal state change request.
 6. The internet of things device of claim5, wherein the internet of things device is further configured toreceive the external state change request from a mobile device.
 7. Themethod of claim 1, wherein the internet of things device connects to aweb target via a Wi-Fi protocol.
 8. The method of claim 1, wherein afterthe connection to the cloud server is terminated, a delay timer isstarted.
 9. A system comprising: a server system hosting a web target;and an internet of things device comprising: a processor; a memorycommunicatively connected to the processor, the memory storinginstructions which, when executed, cause the internet of things deviceto: at a predetermined time, connect to a web target; receive, from theweb target, a response indicating whether a change to one or moresettings to the internet of things device has been received at a cloudserver associated with the internet of things device; assess contents ofthe response; based on the response indicating that no change to the oneor more settings has been received at the cloud server, terminate aconnection to the web target without connecting to a secure internet ofthings server interface of the cloud server; and based on the responseindicating that a change to the one or more settings has been receivedat the cloud server: establish a connection to the cloud server via asecure internet of things server interface; update one or more settingson the internet of things device based on the change to the one or moresettings at the cloud server; and terminate the connection to the cloudserver.
 10. The system of claim 9, wherein the server system furthercomprises the cloud server.
 11. The system of claim 10, wherein the webtarget is hosted by the cloud server.
 12. The system of claim 10,wherein the web target and the cloud server are hosted by a cloudcomputing service remote from the internet of things device.
 13. Thesystem of claim 9, wherein the instructions further cause the internetof things device to, based on failing to receive a response from the webtarget: establish a connection to the cloud server via a secure internetof things server interface; update one or more settings on the internetof things device based on the change to the one or more settings at thecloud server; and terminate the connection to the cloud server.
 14. Thesystem of claim 9, wherein terminating the connection to the cloudserver includes terminating the connections to the web target and thesecure internet of things server interface.
 15. The system of claim 9,wherein the internet of things device is further configured to receivean external state change request from a mobile device.
 16. The system ofclaim 9, wherein the internet of things device connects to a web targetvia a Wi-Fi protocol.
 17. The system of claim 9, wherein after theconnection to the cloud server is terminated, a delay timer is started.18. A system comprising: a server system hosting a cloud server and amirror account; a mobile device application; and an internet of thingsdevice comprising: a processor; a memory communicatively connected tothe processor, the memory storing instructions which, when executed,cause the internet of things device to: receive an external state changerequest initiated by the mobile device application; establish aconnection to the cloud server via a secure internet of things serverinterface; update one or more settings on the internet of things devicebased on a change to the one or more settings within the mirror accountat the cloud server, the mirror account being uniquely associated withthe internet of things device; and terminate the connection to the cloudserver.
 19. The system of claim 18, wherein the internet of thingsdevice is in communication with the mobile device application via aBluetooth connection.
 20. The system of claim 18, wherein after theconnection to the cloud server is terminated, a delay timer is started.